$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26ca557a-a1b7-4989-bd6a-879b4c65b643.roa File: 26ca557a-a1b7-4989-bd6a-879b4c65b643.roa (raw, json) Hash identifier: WvqmGZcbiWRZxL94iuRcDCjO9clEs7ayCxV3rEzBTWs= Subject key identifier: 42:B8:88:B1:CD:14:FD:19:DA:2F:26:29:E0:61:71:99:85:88:B9:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5F6478EAEC797D5DF9709BCE99F255A8014E36D7 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26ca557a-a1b7-4989-bd6a-879b4c65b643.roa Signing time: Thu 02 May 2024 00:00:00 +0000 ROA not before: Thu 02 May 2024 00:00:00 +0000 ROA not after: Thu 06 Jun 2024 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 May 2024 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:64:78:ea:ec:79:7d:5d:f9:70:9b:ce:99:f2:55:a8:01:4e:36:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:00:00 2024 GMT Not After : Jun 6 23:59:59 2024 GMT Subject: serialNumber=3bdd307330a3f7e225293500b5c0fa312a5d5137599266e0f79833535bd70d23, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:e6:56:19:93:c7:3e:4b:2f:81:6f:e3:34: 47:a7:a9:78:14:20:73:76:08:04:06:60:49:94:4f: ca:42:8f:dc:2f:53:7b:57:d5:de:27:22:b1:8f:0d: 5f:32:02:ec:f5:20:12:02:be:1f:ea:94:28:14:ba: 5a:94:80:ce:f0:ef:51:fb:d9:3d:0f:67:08:b5:ca: fd:4b:ec:c5:02:8a:6a:77:9a:0e:c6:06:2a:84:b0: 98:47:cd:37:60:11:91:84:d2:24:38:97:98:ce:41: 02:cb:89:8a:db:01:c3:db:c7:cb:c0:c3:21:47:5f: f6:e9:74:d5:5c:d0:9d:1d:eb:43:06:98:f4:f3:28: 22:18:1e:f4:51:bc:02:64:79:e1:9b:4e:ab:ae:88: 71:a9:d9:fd:e3:d7:c1:df:35:fe:3d:fe:86:71:d3: a0:7b:ff:a5:53:fa:b3:f7:46:9f:95:68:5c:b4:6a: 0c:2e:06:63:98:eb:3b:9e:89:33:1d:04:46:13:b7: ef:a2:ae:d3:55:6b:ea:19:3d:66:fe:71:ce:35:3c: e0:ff:5c:6c:ef:15:82:f2:42:f2:8b:83:cf:46:c4: 1e:d2:db:ce:dd:a9:39:e2:8d:5c:5c:e3:d4:53:67: ee:ba:10:dc:7f:e0:1b:78:45:0f:1f:36:07:17:fd: b3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B8:88:B1:CD:14:FD:19:DA:2F:26:29:E0:61:71:99:85:88:B9:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/26ca557a-a1b7-4989-bd6a-879b4c65b643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2000::/40 Signature Algorithm: sha256WithRSAEncryption 8c:c8:69:27:ed:18:a2:0b:57:e5:55:c5:ef:e9:79:f9:91:79: a0:20:c9:40:09:8d:b0:75:d1:e4:5e:ae:6a:a1:96:93:d3:4c: ad:60:1c:d5:a2:9f:d4:26:d8:dc:50:ab:09:7f:57:3f:9d:f9: ee:fc:88:40:94:8f:f3:21:49:11:ba:fb:e1:60:ea:20:2b:71: 5e:6d:81:67:ed:1a:79:42:05:93:6e:3e:87:d3:b7:56:df:d2: 5e:d0:f3:d7:5d:77:23:bf:13:86:19:a9:c7:9e:bd:94:be:bd: ac:f0:8b:43:95:6d:d3:a1:6d:65:37:1b:be:05:70:82:4e:39: f1:f6:64:6d:ea:72:b9:9c:fd:e5:f0:1c:40:f6:98:96:f6:bf: 60:2b:08:41:a2:bd:b5:46:a2:69:9b:aa:ce:23:ae:5c:72:59: 02:8d:77:a5:76:76:0e:9f:78:40:f7:f9:81:8a:73:a2:a0:d2: 77:8e:3f:19:24:df:c9:d6:9e:9d:d9:21:5a:26:b6:1d:ca:a0: 02:71:a2:37:f9:d9:48:56:b4:88:72:2a:5d:3c:ed:71:08:0f: f8:7a:60:27:18:9c:ff:2d:c0:ce:00:e6:34:ef:1b:55:fa:fe: 2e:c8:b6:b8:73:fd:a5:ae:3f:eb:c3:df:a1:17:ec:d5:29:5d: f5:67:ea:b2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUX2R46ux5fV35cJvOmfJVqAFONtcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI0MDUwMjAwMDAwMFoX DTI0MDYwNjIzNTk1OVowejFJMEcGA1UEBRNAM2JkZDMwNzMzMGEzZjdlMjI1Mjkz NTAwYjVjMGZhMzEyYTVkNTEzNzU5OTI2NmUwZjc5ODMzNTM1YmQ3MGQyMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WrmVhmTxz5LL4Fv4zRHp6l4FCBz dggEBmBJlE/KQo/cL1N7V9XeJyKxjw1fMgLs9SASAr4f6pQoFLpalIDO8O9R+9k9 D2cItcr9S+zFAopqd5oOxgYqhLCYR803YBGRhNIkOJeYzkECy4mK2wHD28fLwMMh R1/26XTVXNCdHetDBpj08ygiGB70UbwCZHnhm06rrohxqdn949fB3zX+Pf6GcdOg e/+lU/qz90aflWhctGoMLgZjmOs7nokzHQRGE7fvoq7TVWvqGT1m/nHONTzg/1xs 7xWC8kLyi4PPRsQe0tvO3ak54o1cXOPUU2fuuhDcf+AbeEUPHzYHF/2zWQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEK4iLHNFP0Z2i8mKeBhcZmFiLnQMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI2Y2E1NTdhLWExYjctNDk4OS1iZDZhLTg3OWI0YzY1YjY0My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9CAwDQYJKoZIhvcNAQELBQADggEBAIzIaSftGKILV+VVxe/p efmReaAgyUAJjbB10eRermqhlpPTTK1gHNWin9Qm2NxQqwl/Vz+d+e78iECUj/Mh SRG6++Fg6iArcV5tgWftGnlCBZNuPofTt1bf0l7Q89dddyO/E4YZqceevZS+vazw i0OVbdOhbWU3G74FcIJOOfH2ZG3qcrmc/eXwHED2mJb2v2ArCEGivbVGommbqs4j rlxyWQKNd6V2dg6feED3+YGKc6Kg0neOPxkk38nWnp3ZIVomth3KoAJxojf52UhW tIhyKl087XEID/h6YCcYnP8twM4A5jTvG1X6/i7Itrhz/aWuP+vD36EX7NUpXfVn 6rI= -----END CERTIFICATE-----Generated at Thu May 23 05:39:35 2024 by rpki-client on console-ams.rpki-client.org